Benchmark-setting vulnerability